topic Re: Best Practice Assessment /SCM in General Topics

Best Practice Assessment /SCM

A.Hein426821 — Fri, 15 May 2026 11:19:09 GMT

I used to run BPA in Strata Cloud Manager, but now when I log in I can’t find the On-Demand BPA option. How can I run a Best Practice Assessment on a Palo Alto firewall?

Re: Best Practice Assessment /SCM

acsebav — Tue, 19 May 2026 09:48:05 GMT

Hi,
I can't find this menu on SCM Essential (AIOPs don't exist enymore).
I have BPA user and Super user permission on CSP.

I found this thread that ask the same issue:
https://live.paloaltonetworks.com/t5/strata-cloud-manager/new-reports-on-demand-bpa/td-p/1252110

Did you find the right way to do the old on-demand BPA with TSF?
I did it to get the partner points.

Re: Best Practice Assessment /SCM

reaper — Tue, 19 May 2026 14:40:26 GMT

You need to have the AIOPS premium or SCM pro license

The bpa is located in Insights > Posture > Best Practices, but it is only available for firewalls connected to SCM, you can't run an ad-hoc BPA anymore....

the only place left you can run your own BPA is via the API:

https://pan.dev/aiops-ngfw-bpa/api/

Re: Best Practice Assessment /SCM

acsebav — Tue, 19 May 2026 15:04:36 GMT

Ok thanks.

So, the partner point for BPA are no longer used? Or do we need to use the API?